Menu

M2M FEATURE NEWS

Mocana Verifies Integration with IoT Platforms

By Paula Bernier September 21, 2017

Mocana has verified integration with the Amazon Web Services, Microsoft Azure IoT, and VMware Internet of Things platforms. The company, which provides embedded security software for industrial control systems and IoT devices, also is integrated with the GE Predix Machine.

The Mocana software is U.S. National Institute of Standards and Technology FIPS 140-2 cybersecurity standard certified. That makes it a good match for commercial, enterprise, government, and industrial applications, the company says.

The software development kits device designers and developers typically use to connect to analytics and cloud resources leverage TLS, Mocana says. But it adds that its solution is more secure than the open source TLS software known as OpenSSL, which the company notes has been reported to have more than 250 vulnerabilities.

And the 15-year-old company prides itself on making it easy for developers to replace OpenSSL with its own technology. To enable that Mocana created an OpenSSL connector. That allows applications to continue using OpenSSL APIs to call cryptographic functions that are then executed by Mocana’s crypto engine rather than OpenSSL’s engine. This feature is available in version 6.5 of Mocana.

Internet of Things security has become a high-profile topic in recent years. And it’s an important one, given that the growing number of IoT devices continues to expand the threat surface, and considering that security was an afterthought – if it was a thought at all – in many early generation connected things.

One of the latest connected device security problems we’ve learned about is being called BlueBorne. A company called Armis Labs explains that it attacks Android, iOS, Windows, and Linux devices via Bluetooth. That enables attackers to take control of devices, access corporate data and networks, and even penetrate secure air-gapped networks and spread malware to adjacent devices, the IoT security company says.

According to Steve Brumer, partner at 151 Advisors, most IoT security problems involve devices for which vulnerabilities have been identified and patches are available, but which nonetheless have not been updated.

“Currently, there is no checklist or approval process to indicate that a device meets such standards,” says Brumer. “Every restaurant has a rating of 0 – 100 at the front door, but home cameras don’t have a rating system that indicates if a device is future proof for security threats. Can it receive OTA updates? Can the device check for patches every week? Who is ultimately responsible for updating the device?

“The most secure device would look for new patches every day, and the burden to update the device would be on the manufacturer,” Brumer adds. “A less secure device would require the end user to check for patches and manually update the device, which in reality would never happen. If you ask most consumers who is responsible for updating the software on their home cameras, those in the tech industry will not know, and those who are not tech savvy may reply ‘What? There is software in the camera?’”




Edited by Ken Briodagh

Executive Editor, TMC

SHARE THIS ARTICLE
Related Articles

Uruguay, Costa Rica and Argentina lead the Latin American Telecoms Market

By: Ken Briodagh    7/12/2018

BuddeComm recently launched an exclusive Telecoms Maturity Index (TMI) that analyzes the broadband, mobile and fixed Line markets of a country as well…

Read More

Kerlink Signs Agreement with Brazilian Manufacturer Amid Rapid IoT Network Growth

By: Ken Briodagh    7/10/2018

Kerlink and TCT Brasil, a leading electronics distributor in Brazil, have announced that TCT Brasil will distribute Kerlink solutions in that country.

Read More

Avanti Communications Signs $10 Million Contract with Viasat

By: Ken Briodagh    7/2/2018

Capacity Lease Deal extends Connectivity Services on Viasat's Best Available Network for Avanti

Read More

Aexonis and JpU Partner to Simplify IoT Deployments

By: Ken Briodagh    6/28/2018

Aexonis, a maker of IoT mediation and management software for MVNE/MVNO, and JpU, a provider of virtual mobile core technology, announced the signing …

Read More

Zinwave Launches On Go Pilot for Fortune 100 Customers

By: Chrissie Cluney    6/25/2018

Zinwave has announced the availability of their OnGo products that will see several of its Fortune 100 customers pilot private LTE technology over CBR…

Read More